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DETAILED ACTION 

1 . The amendment of 23 August 2007 has been noted and made of record. 

2. Claims 1-7 have been presented for examination. 

Response to Arguments 

3. Applicant's arguments with respect to claims 1-7 have been considered but are moot in 
view of the new grounds of rejection. 

4. See further rejections set forth below. 

Information Disclosure Statement 

5. The information disclosure statement (IDS) submitted on 23 August 2007 is in 
compliance with the provisions of 37 CFR 1 .97. Accordingly, the examiner has considered the 
information disclosure statement. 

Claim Rejections - 35 USC §103 

6. The text of those sections of Title 35, U.S. Code not included in this action can be found 
in a prior Office action. 

7. Claims 1, 3, and 5-7 are rejected under 35 U.S.C. 103(a) as being unpatentable over U.S. 
Patent Application Publication No. 2005/0220078 to Luken, hereinafter Luken, in view of RFC 
3525: Gateway Control Protocol Version 1, hereinafter RFC 3525, and in further view of U.S. 
Patent No: 7,089,21 1 Bl to Trostle et al., hereinafter Trostle. 

8. As per claim 1, Luken teaches a system comprising a media gateway (Figure 1 [blocks 26 
and 40]) and a Media Gateway Controller (Figure 1 [blocks 36, 44]). Luken also discloses that 
the Media Gateway Controller can be used to verify digital signatures (paragraph 0064), which 
are based on keys. 
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9. Luken does not teach generating a session key based on the digital signature to be used to 
communicate between the two devices and renewing a session key when the previous session 
key has expired. 

10. RFC 3525 teaches that the media gateway controller can provide media gateways with 
session keys (printed page 72 of 200, Section 10.3 Protection of Media Connections), similar to 
page 5 of the Applicant's disclosure. 

11. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made for the media gateway controller to provide session keys to the media gateways, since 
RFC 3525 states at printed page 72 of 200 that the session keys can be used to encrypt the audio 
messages, thereby protecting against eavesdroppers. 

12. Neither Luken nor RFC 3525 disclose updating the session key after it has expired. 

13. Trostle teaches the updating of session keys in response to normal expiration or other 
causes (column 10, lines 50-52). 

14. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to update the session key when it expired, since Trostle states at column 10 lines 45-50 
that key updates are vital to maintain the secure nature of the communication. 

15. Regarding claim 3, Luken teaches for each call, attaching a digital signature to each call 
message from said Media Gateway Controller to said Media Gateway by using said shared key 
(paragraph 0064); 
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validating said digital signature in said call message in said Media Gateway by using said 
shared key, and if it is valid,- returning a response message attached with a digital signature using 
said shared key to said Media Gateway Controller (paragraph 0064); and 

validating said digital signature in said response message in said Media Gateway 
Controller by using said shared key, if it is valid, setting up a call service (paragraph 0020, i.e. 
establishing a connection), otherwise denying the call (paragraph 022, i.e. rejection message). 

16. With regards to claim 5, Luken teaches that the algorithm used to generate a shared key 
by said Media Gateway Controller and said Media Gateway is different from the algorithm used 
to generate a digital signature by said Media Gateway Controller and said Media Gateway 
(paragraph 0064, i.e. Algorithm field). 

1 7. With regards to claim 6, Luken teaches that a field/packet of an expanded protocol is 
used to transmit said parameter for generating a shared key and said digital signature (paragraph 
0064, i.e. key and digital signature). 

18. Regarding claim 7, RFC 3525 discloses the use of session keys as discussed above. 
Session keys include a lifetime the key that is either time or the number of times said shared key 
can be used as noted by page 216 of Stallings. 
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19. Claims 2 and 4 rejected under 35 U.S.C. 103(a) as being unpatentable over Luken in view 
' of RFC 3525 and Trostle as applied to claim 1 above, and further in view of Cryptography and 

Network Security, by William Stallings, hereinafter Stallings. 

20. Regarding claims 2 and 4, Luken teaches generating a new shared key further comprises: 
initiating a register signaling from said Media Gateway to said Media Gateway Controller 

to register, wherein said register signaling has a parameter for generating a shared key and a 
digital signature generated by said initial key (paragraph 0064). 

21. RFC 3525 teaches generating a shared key (i.e. session key) as discussed above. 
Furthermore, since RFC 3525 discloses the use of session keys the lifetime of said shared key 
after said Media Gateway Controller has validated said Media Gateway with said initial key 
should be set as noted with respect to claim 7. 

22. Neither Luken, RFC 3525, and Trostle teach initiating a modification command from said 
Media Gateway Controller to said Media Gateway, wherein said modification command has a 
parameter for generating the shared key, a digital signature generated by said initial key and a 
lifetime of a shared key; and generating the shared key and setting up the lifetime of said shared 
key after said Media Gateway has validated said Media Gateway Controller with said initial key. 

23. It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to generate a new shared key, since Stallings states at page 216 that the more 
frequently the session key are exchanged, the more secure they are, because the opponent has 
less ciphertext to work with for any given session key. 
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Conclusion 

24. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Christian La Forgia whose telephone number is (571) 272-3792. 
The examiner can normally be reached on Monday thru Thursday 7-5. 

25. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

26. Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or PublioPAlR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http;//pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Christian LaForgia 
Patent Examiner 
Art Unit 2131 
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